================================================================================ UBSAN: shift-out-of-bounds in net/sched/sch_api.c:571:7 shift exponent 144 is too large for 32-bit type 'int' CPU: 0 PID: 3205 Comm: kworker/0:3 Not tainted 5.11.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x107/0x163 lib/dump_stack.c:120 ubsan_epilogue+0xb/0x5a lib/ubsan.c:148 __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 lib/ubsan.c:395 __qdisc_calculate_pkt_len.cold+0x62/0xcf net/sched/sch_api.c:571 qdisc_calculate_pkt_len include/net/sch_generic.h:779 [inline] __dev_xmit_skb net/core/dev.c:3761 [inline] __dev_queue_xmit+0x1276/0x2dd0 net/core/dev.c:4119 neigh_resolve_output net/core/neighbour.c:1491 [inline] neigh_resolve_output+0x4d8/0x7e0 net/core/neighbour.c:1471 neigh_output include/net/neighbour.h:510 [inline] ip6_finish_output2+0x6b8/0x16c0 net/ipv6/ip6_output.c:117 __ip6_finish_output net/ipv6/ip6_output.c:182 [inline] __ip6_finish_output+0x4c1/0xe10 net/ipv6/ip6_output.c:161 ip6_finish_output+0x35/0x200 net/ipv6/ip6_output.c:192 NF_HOOK_COND include/linux/netfilter.h:290 [inline] ip6_output+0x1db/0x520 net/ipv6/ip6_output.c:215 dst_output include/net/dst.h:441 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ndisc_send_skb+0xa90/0x1750 net/ipv6/ndisc.c:508 ndisc_send_ns+0x3a9/0x850 net/ipv6/ndisc.c:650 addrconf_dad_work+0xc1c/0x1280 net/ipv6/addrconf.c:4116 process_one_work+0x98d/0x15f0 kernel/workqueue.c:2275 worker_thread+0x64c/0x1120 kernel/workqueue.c:2421 kthread+0x3b1/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 ================================================================================